Sécurité des infrastructures de virtualisation et Cloud ComputingVirtualisation et Cloud Computing (STI)

The aim of this module is to deepen understanding of the functioning of virtualization infrastructure and the technologies on which it is based in order to evaluate, design or ensure safety.

• General introduction on cloud infrastructure and introduction of the module framework

• Containers under Linux

• Availability: UNIX concepts and cgroups

• Insulation with namespaces

• Linux Capabilities

• seccomp-bpf

• TD 1:

• Containers with Docker

• Using the kernel interface to create C-namespaces

• systemd

• Background

• Operation and general use

• Security features

• Threat model, attack surface, potential and known vulnerability

• TD 2:

• Systemd & logd operation

• Hardening of a unit systemd

• Managing with cgroups

• SELinux

• Basic Security Concepts

• Confidentiality / Integrity / Diposability

• Extensions: Authenticity / Auditability / No repudiation

• Principle of every privilege

• Access control models

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

• Basic concepts for SELinux

• Concepts needed to write a SELinux policy

• TD 3:

• Operation of SELinux

• Context and Boolean Management

• Writing a Policy Module

• User confidence

• Security of container managers (Podman, Docker, etc.)

• Operation of a container manager

• Threat model, attack surface, potential and known vulnerability

• Hardening of container managers

• Safety and hardening of KVM

• Operation of virtualization with KVM

• Operation of virtual machine managers

• Threat model, attack surface, potential and known vulnerability

• Hardening of virtual machine managers and virtualization with KVM

• TD 4:

• Containment of containers with SELinux

• Creation and hardening of a container image

• Publication of a container image on a public register

• Infrastructure security

• OpenStack General Operation and Security

• Operation and security of Kubernetes

• Cloud provider security

• Security-sensitive deployment models

• Infrastructure as Code

• Immutable Infrastructure

• TD 5:

• Introduction to Terraform (Infrastructre as Code)

• Introduction to Fedora CoreOS (Immutable Infrastructure)

• Kubernetes and OpenShift Security

Final examination in the form of a QCM, carried out in progress, at the end of the intervention.

Project to be completed within 2-3 weeks, requiring the application of skills acquired during TDs:

• Creation of a unit systemd taking into account security constraints
• Creating a SELinux policy module for a demon-like application
• Creation (Dockerfile) and execution of a container taking into account security constraints

General:

• https://www.ssi.gouv.fr/administration/guide/recommandations-de-configuration-materielle-de-postes-clients-et-serveurs-x86/
• https://www.ssi.gouv.fr/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

OpenStack:

• https://docs.openstack.org/security-guide/
• https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.2/html/security_and_hardening_guide/index

Kubernetes:

• https://kubernetes.io/docs/tasks/administer-cluster/securing-a-cluster/
• https://docs.openshift.com/container-platform/4.9/security/container_security/security-understanding.html
• https://www.redhat.com/en/resources/openshift-security-guide-ebook